(fleet/cert-manager) add CertManagerCertificateReadyStatus alert

Author: jhoblitt

fleet/lib/cert-manager-conf/base/kustomization.yaml

@@ -3,3 +3,4 @@ resources:
   - clusterissuer-letsencrypt-staging.yaml
   - clusterissuer-letsencrypt.yaml
   - externalsecret-route53.yaml
+  - prometheusrule-cert-manager.yaml

fleet/lib/cert-manager-conf/base/prometheusrule-cert-manager.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  labels:
+    lsst.io/rule: "true"
+  name: cert-manager
+spec:
+  groups:
+    - name: cert-manager
+      rules:
+        - alert: CertManagerCertificateReadyStatus
+          annotations:
+            description: 'Certificate {{ $labels.namespace }}/{{ $labels.name }} is not ready.'
+          expr: certmanager_certificate_ready_status{condition="False"} == 1
+          for: 10m
+          labels:
+            severity: critical